Virus Shortcut

Virus Shortcut will create a file Thumb.db, but not Tumbs.db because the thumbnail cache of the original no additional s in behind. Like other viruses, this virus will create a duplicate file in each folder by using the extension. Ink (shortcut). This virus will make the process wscript.exe services (can be seen in the task manager) while in normal conditions the process of services does not exist (not running). Okay virus shortcut can be delete with this step:

1. Turn off System Restore
2. Turn off the virus wsrcipt.exe (C: \ WINDOWS \ System32 \ wscript.exe) or with the task manager (end process).
3.  Can use Process Explorer or misc. tool in HijackThis.
4. Delete files in My Documents database.mdb virus.
5. Remove duplicate files the virus. To facilitate the search for duplicate this virus you should use the search facility in Windows, with an additional search facility if it is open, the More advanced options / option / check Search system folders and Search hidden files and folders. After that look for the following file and delete the files found: Search by name autorun.inf file size 8 KB, Thumb.db size 8 KB, file with the extension .lnk size 1 KB. 
6. Remove Autorun registry created a virus using HijackThis ..
7. Search in the HKCU \ .. \ Run: database.mdb related file.

 okay, if you don't understand so please comment.

Posted in: Virus